PostgreSQL servers should have 'connection_throttling' set to 'ON'
Enable connection_throttling on PostgreSQL Servers. The Azure Policy audits PostgreSQL databases without Connection throttling enabled. This setting enables temporary connection throttling per IP for too many invalid password login failures.
This setting enables temporary connection throttling per IP for too many invalid password login failures.
What this control checks
PostgreSQL server parameter 'connection_throttling' must be set to 'ON'
Audit evidence
Evidence that deployed resources meet this control: Azure Policy compliance results for the built-in policy definition "Connection throttling should be enabled for PostgreSQL database servers" (5345bb39-67dc-4960-a1bf-427e16b9a0bd); PowerPipe control azure_compliance.control.postgres_db_server_connection_throttling_on.
Scans of the Terraform code that flag the same setting before deployment: KICS query "PostgreSQL Server Without Connection Throttling" (2b3c671f-1b76-4741-8789-ed1fe0785dc4); Trivy check AZU-0021.
Framework-specific interpretation
CIS Azure Benchmark v1.3.0: Mapped to 4.3.6 (Ensure server parameter 'connection_throttling' is set to 'ON' for PostgreSQL Database Server).
CIS Azure Benchmark v1.4.0: Mapped to 4.3.5 (Ensure server parameter 'connection_throttling' is set to 'ON' for PostgreSQL Database Server).
CIS Azure Benchmark v1.5.0: Mapped to 4.3.5 (Ensure server parameter 'connection_throttling' is set to 'ON' for PostgreSQL Database Server).
CIS Azure Benchmark v2.0.0: Mapped to 4.3.5 (Ensure server parameter 'connection_throttling' is set to 'ON' for PostgreSQL Database Server).
CIS Azure Benchmark v2.1.0: Mapped to 4.3.5 (Ensure server parameter 'connection_throttling' is set to 'ON' for PostgreSQL Database Server).
Framework mappings
The clauses this control is mapped to in each framework.
- 4.3.6 Ensure server parameter 'connection_throttling' is set to 'ON' for PostgreSQL Database Server
- 4.3.5 Ensure server parameter 'connection_throttling' is set to 'ON' for PostgreSQL Database Server
- 4.3.5 Ensure server parameter 'connection_throttling' is set to 'ON' for PostgreSQL Database Server
- 4.3.5 Ensure server parameter 'connection_throttling' is set to 'ON' for PostgreSQL Database Server
- 4.3.5 Ensure server parameter 'connection_throttling' is set to 'ON' for PostgreSQL Database Server
Related controls
Tool mappings
Use these identifiers to cross-reference this control across tools, reports, and evidence.
- Compliance.tf Control:
postgres_db_server_connection_throttling_on - Powerpipe Control:
azure_compliance.control.postgres_db_server_connection_throttling_on - Azure Policy Definition:
5345bb39-67dc-4960-a1bf-427e16b9a0bd - KICS Query:
2b3c671f-1b76-4741-8789-ed1fe0785dc4 - Trivy Check:
AZU-0021
Last reviewed: 2026-10-14